| #1701 | CF7 Mate – AI Form Builder, Styler & Multi-Step Forms for Contact Form 7 | 93 | 3 | 9 | 20k+ | | | Non-prefixed class |
| #1702 | Bookmark Card | 100 | 1 | 0 | 700 | | | Missing direct file access protection |
| #1703 | Radio Station by netmix® – Manage and play your Show Schedule in WordPress! | 23 | 934 | 3,619 | 1k+ | | | Non-prefixed global variable |
| #1704 | Dynamic AJAX Product Filters for WooCommerce | 100 | | 0 | 900 | | | No open findings |
| #1705 | Meow Gallery | 29 | 113 | 182 | 10k+ | | | Direct Query |
| #1706 | The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce | 24 | 12,049 | 494 | 100k+ | | | Text Domain Mismatch |
| #1707 | Document Viewer – Embed and Display Office and PDF Files | 100 | | 0 | 2k+ | | | No open findings |
| #1708 | WCFM Marketplace – Multivendor Marketplace for WooCommerce | 22 | 1,934 | 1,966 | 10k+ | | | Non-prefixed global variable |
| #1709 | WCFM – Frontend Manager for WooCommerce | 22 | 4,754 | 5,054 | 20k+ | | | Non-prefixed global variable |
| #1710 | WebPlanex: GST Invoice India | 42 | 63 | 63 | 400 | | | Text Domain Mismatch |
| #1711 | AI Builder | 83 | 3 | 5 | 400 | | | Output is not escaped |
| #1712 | Timetics – Appointment Booking Calendar & Scheduling System | 99 | 2 | 3 | 2k+ | | | wp function not compatible with requires wp |
| #1713 | WPC Price by Quantity for WooCommerce | 92 | | 37 | 1k+ | | | Non-prefixed global variable |
| #1714 | AdRotate Banner Manager | 25 | 1,363 | 846 | 20k+ | | | Unsafe printing function |
| #1715 | WP Plugin Info Card | 37 | 53 | 376 | 500 | | | Nonce verification recommended |
| #1716 | Flex Posts – Responsive Posts Block | 100 | | 0 | 3k+ | | | No open findings |
| #1717 | FluentSnippets – High-Performance Code Snippets, Header & Footer Code, Custom CSS & PHP Code Manager | 56 | 31 | 27 | 50k+ | | | Nonce verification recommended |
| #1718 | WIP Custom Login | 43 | 21 | 37 | 700 | | | Nonce verification recommended |
| #1719 | Advanced Product Fields (Product Addons) for WooCommerce | 39 | 145 | 145 | 50k+ | | | Output is not escaped |
| #1720 | Accordion Slider | 29 | 391 | 447 | 2k+ | | | Unsafe printing function |
| #1721 | Slider Pro | 28 | 583 | 527 | 4k+ | | | Unsafe printing function |
| #1722 | g-FFL Checkout | 31 | 249 | 300 | 600 | | | Request data is not unslashed |
| #1723 | Booter – Bots & Crawlers Manager | 68 | | 81 | 7k+ | | | Non-prefixed global variable |
| #1724 | Video Gallery – YouTube Gallery, Playlist & Video Grid | 25 | 275 | 1,066 | 2k+ | | | Non-prefixed hook name |
| #1725 | Smart Image Resize for WooCommerce | 25 | 582 | 404 | 7k+ | | | Text Domain Mismatch |
| #1726 | Sticky Elementor – Sticky Header, Menu Color After Sticky, Logo Swap & Back to Top Button | 94 | 1 | 0 | 500 | | | Output is not escaped |
| #1727 | Data Exchange for WooCommerce and 1C:Enterprise/1С:Предприятие | 35 | 1 | 2 | 1k+ | | | Hidden files included |
| #1728 | Cryptocurrency Widgets Pack | 40 | 222 | 52 | 700 | | | Unsafe printing function |
| #1729 | Block for Mailchimp – Add Email Subscription Forms and Collect Leads | 100 | | 1 | 2k+ | | | Non-prefixed class |
| #1730 | CodePeople Post Map for Google Maps | 37 | 257 | 31 | 3k+ | | | Unsafe printing function |
| #1731 | External files in Media Library | 90 | 16 | 68 | 400 | | | Direct Query |
| #1732 | Image Hover Effects – Elementor Addon | 64 | 117 | 7 | 40k+ | | | Text Domain Mismatch |
| #1733 | Blocks for ACF Fields — Display Custom Fields in the Block Editor | 98 | | 21 | 1k+ | | | Non-prefixed hook name |
| #1734 | Abandoned Cart Recovery for WooCommerce | 41 | 20 | 202 | 4k+ | | | Request data is not unslashed |
| #1735 | Advanced Custom Fields: Price Field | 71 | 12 | 7 | 400 | | | Output is not escaped |
| #1736 | WING Website Migrator | 95 | 2 | 4 | 400 | | | Discouraged PHP function |
| #1737 | OPcache Reset | 35 | 9 | 7 | 400 | | | Non-prefixed function |
| #1738 | WP Import Export Lite | 19 | 737 | 979 | 40k+ | | | Non-prefixed global variable |
| #1739 | Ibtana – Ecommerce Product Addons | 23 | 1,547 | 1,718 | 6k+ | | | Non Singular String Literal Domain |
| #1740 | Copy Move Posts | 98 | | 7 | 400 | | | Non-prefixed global variable |
| #1741 | BtW Importer – Free Blogger/Blogspot Migration | 97 | | 2 | 400 | | | Database parameter is not escaped |
| #1742 | Crypto Payment Gateway with Instant Payouts | 100 | | 4 | 1k+ | | | Non-prefixed class |
| #1743 | Jock On Air Now (JOAN) | 38 | 121 | 224 | 500 | | | Output is not escaped |
| #1744 | Rollbar | 39 | 75 | 14 | 400 | | | Output is not escaped |
| #1745 | WP Fast Total Search – The Power of Indexed Search | 25 | 209 | 291 | 1k+ | | | Non-prefixed global variable |
| #1746 | Safelayout Cute Preloader – CSS3 WordPress Preloader | 84 | 3 | 14 | 10k+ | | | Input is not validated |
| #1747 | zipaddr-jp | 98 | 2 | 52 | 50k+ | | | Non-prefixed global variable |
| #1748 | Recently Viewed Products for WooCommerce – Carousel, Widget, Block & Email | 87 | 2 | 18 | 1k+ | | | Database parameter is not escaped |
| #1749 | Datafeedr API | 34 | 307 | 48 | 6k+ | | | Output is not escaped |
| #1750 | Advanced Custom Fields: Font Awesome Field | 40 | 332 | 70 | 90k+ | | | Text Domain Mismatch |